BlackShades
- First seen
- 2012-01-01 00:00:00
- Malware type
- rat
- Family
- Malware family
- Last IoC activity
- 2026-07-21 20:18:39
- Profile updated
- 2026-07-07 12:49:41
Context
BlackShades is a remote access trojan (RAT) that allows attackers to remotely control infected computers. It was widely used for cybercrime activities, including data theft and spying, before law enforcement cracked down on its distribution network.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Blackshades_Auto (yara-rule)
Reports & references
- secureworks.com — Aluminum Saratoga (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Blackshades (report)
- contagiodump.blogspot.com — Rat Samples From Syrian Targeted (report)
- blog.malwarebytes.com — Taking Off The Blackshades (report)
- blog.malwarebytes.com — Blackshades In Syria (report)
- blog.malwarebytes.com — You Dirty Rat Part 2 Blackshades Net (report)
- krebsonsecurity.com — Blackshades Trojan Users Had It Coming (report)